Reply
Thread Tools
MountainX's Avatar
Posts: 415 | Thanked: 193 times | Joined on Jun 2009 @ A place with no mountains
#41
Originally Posted by MountainX View Post
Would you be willing to post your /etc/squid/squid.conf?
I'm still having trouble.
I'm at the [http_access allow all] stage of the configuration process and I'm getting this error:
"Swiftweasel is configured to use a proxy server that is refusing connections."
RESOLVED: my firewall was blocking the squid port.
__________________
Hi! I would like to help make your experience on these forums better. If I can help with anything, just ask!

Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 Intro, Frequently Asked Questions (FAQ)

Choosing open source is an important purchasing decision for your future. The closed source model of computing is a form of exploitation -- of us! Open source empowers us. Be smart -- chose open source.
 
MountainX's Avatar
Posts: 415 | Thanked: 193 times | Joined on Jun 2009 @ A place with no mountains
#42
Originally Posted by hitec View Post
For USA T-Mobile, under settings - internet connections - T-Mobile internet, put in hiptop.t-mobile.com as the access point name. Leave the user name and password blank. Also under the advanced tab, put in the ip address and port of a proxy server.
I have my proxy server set up and I have entered the IP add and port.
Is hiptop.t-mobile.com still recommended as the best APN?
What are the username and password for? T-Mob or my proxy server?
__________________
Hi! I would like to help make your experience on these forums better. If I can help with anything, just ask!

Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 Intro, Frequently Asked Questions (FAQ)

Choosing open source is an important purchasing decision for your future. The closed source model of computing is a form of exploitation -- of us! Open source empowers us. Be smart -- chose open source.
 
Posts: 968 | Thanked: 974 times | Joined on Nov 2008 @ Ohio
#43
Originally Posted by MountainX View Post
I have my proxy server set up and I have entered the IP add and port.
Is hiptop.t-mobile.com still recommended as the best APN?
What are the username and password for? T-Mob or my proxy server?
Glad to hear you got it worked out. As far as I know, hiptop is the way to go.

Under the Tmobile internet connection settings, leave username/password blank. You can/should setup uasername password for squid though. It should ask for user/pass when you open a webpage.

@Bugslife you can setup an account at my.tmobile.com using your phone number. You can easily switch there. I believe you can also dial 611 and change over the phone.

From what I've read, Tmobile blocked port 80 to discourage IPhone users (a much larger group than we are). I think it's also harder to set a proxy on the IPhone, and harder to setup your own proxy to use. Free proxies can be slow and unreliable, and insecure. I don't think TMo is worried about a small minority of users jumpping through hoops to get internet (before Aug, all you had to do was get on the sidekick plan, no proxy neede). Of course if you abuse it, they may ban you. Casual use should e OK though, I wouldn't d/l torrents or anything.
__________________
*Consumer*, not a developer! I apologize for any inconvenience.
My script to backup /home and /opt
Samsung Galaxy S Vibrant, Huawei S7, N900(retired), N800(retired)
 
MountainX's Avatar
Posts: 415 | Thanked: 193 times | Joined on Jun 2009 @ A place with no mountains
#44
Originally Posted by lemmyslender View Post
Glad to hear you got it worked out.
I spoke too soon. My proxy server is not working well.
I'm reading stuff like this to try to figure it out...
http://www.cyberciti.biz/tips/linux-...uid-howto.html
__________________
Hi! I would like to help make your experience on these forums better. If I can help with anything, just ask!

Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 Intro, Frequently Asked Questions (FAQ)

Choosing open source is an important purchasing decision for your future. The closed source model of computing is a form of exploitation -- of us! Open source empowers us. Be smart -- chose open source.
 
Posts: 481 | Thanked: 190 times | Joined on Feb 2006 @ Salem, OR
#45
You guys can get any router that supports openwrt (full linux on a wireless router) to act as a proxy. Here are some information about squit on openwrt. This solution is a lot cheaper and very stable.

https://forum.openwrt.org/viewtopic.php?id=2069
 
MountainX's Avatar
Posts: 415 | Thanked: 193 times | Joined on Jun 2009 @ A place with no mountains
#46
Originally Posted by ioan View Post
You guys can get any router that supports openwrt (full linux on a wireless router) to act as a proxy. Here are some information about squit on openwrt. This solution is a lot cheaper and very stable.

https://forum.openwrt.org/viewtopic.php?id=2069
I appreciate that, but in my case I just installed squid on my web server on Linode.com. It should be attached to a fairly big pipe, so this is much better than having a proxy server on my home DSL.

But I just cannot get squid to work well. I have no idea what to try next.
__________________
Hi! I would like to help make your experience on these forums better. If I can help with anything, just ask!

Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 Intro, Frequently Asked Questions (FAQ)

Choosing open source is an important purchasing decision for your future. The closed source model of computing is a form of exploitation -- of us! Open source empowers us. Be smart -- chose open source.
 
Posts: 968 | Thanked: 974 times | Joined on Nov 2008 @ Ohio
#47
Originally Posted by MountainX View Post
I spoke too soon. My proxy server is not working well.
I'm reading stuff like this to try to figure it out...
http://www.cyberciti.biz/tips/linux-...uid-howto.html
For what its worth, here's my squid.conf with all the comments etc removed:

Code:
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443          # https
acl SSL_ports port 563          # snews
acl SSL_ports port 873          # rsync
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl Safe_ports port 631         # cups
acl Safe_ports port 873         # rsync
acl Safe_ports port 901         # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users
http_access allow all
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
icp_access allow localnet
icp_access deny all
http_port 3128
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Package(.gz)*)$        0       20%     2880
refresh_pattern .               0       20%     4320
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
hosts_file /etc/hosts
coredump_dir /var/spool/squid
I'm not sure if that would work on a hosted server though. You might want to check with linode.com. Maybe they need to change something on their end (port redirection?). Maybe try getting it working at home first?
__________________
*Consumer*, not a developer! I apologize for any inconvenience.
My script to backup /home and /opt
Samsung Galaxy S Vibrant, Huawei S7, N900(retired), N800(retired)
 
MountainX's Avatar
Posts: 415 | Thanked: 193 times | Joined on Jun 2009 @ A place with no mountains
#48
Originally Posted by lemmyslender View Post
For what its worth, here's my squid.conf with all the comments etc removed:

I'm not sure if that would work on a hosted server though. You might want to check with linode.com. Maybe they need to change something on their end (port redirection?). Maybe try getting it working at home first?
Thank you. I read thru your config and it is very similar to mine.

Here is mine:

Code:
# grep -v "^#" /etc/squid/squid.conf | sed -e '/^$/d'
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
acl myUser proxy_auth me
acl all src 0.0.0.0/0.0.0.0
http_access allow myUser
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443		# https
acl SSL_ports port 563		# snews
acl SSL_ports port 873		# rsync
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl Safe_ports port 631		# cups
acl Safe_ports port 873		# rsync
acl Safe_ports port 901		# SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny to_localhost
http_access deny all !myUser
icp_access allow all
http_port 3128
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
hosts_file /etc/hosts
coredump_dir /var/spool/squid
__________________
Hi! I would like to help make your experience on these forums better. If I can help with anything, just ask!

Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 Intro, Frequently Asked Questions (FAQ)

Choosing open source is an important purchasing decision for your future. The closed source model of computing is a form of exploitation -- of us! Open source empowers us. Be smart -- chose open source.
 
Posts: 968 | Thanked: 974 times | Joined on Nov 2008 @ Ohio
#49
OK by no means am I an expert but: I just tested mine with my N900 on sidekick plan (just switched). Going to web prompts for a username/password then connects, Nokia Messaging account in email appears to refresh without problems, and my "availability" flashes then show green connected. I only have the proxy setup for http and https, I've left the others blank. EDIT: Availability went green before launching the browser, so not going through the proxy.

I would try adding the first couple lines auth_param and
acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users
When I first set it up following the link I posted, I used:
acl myusernameUser proxy_auth myusernameUser
http_access allow myusernameUser

which didn't work until I switched it to
acl myusername proxy_auth myusername
http_access allow myusername

My latest setup works as posted using ncsa_users, which should only allow a user in the passwd file. Wish I could help more, just going forward blindly on my own as well.
__________________
*Consumer*, not a developer! I apologize for any inconvenience.
My script to backup /home and /opt
Samsung Galaxy S Vibrant, Huawei S7, N900(retired), N800(retired)
 
MountainX's Avatar
Posts: 415 | Thanked: 193 times | Joined on Jun 2009 @ A place with no mountains
#50
Originally Posted by lemmyslender View Post

I would try adding the first couple lines auth_param and


When I first set it up following the link I posted, I used:
acl myusernameUser proxy_auth myusernameUser
http_access allow myusernameUser

which didn't work until I switched it to
acl myusername proxy_auth myusername
http_access allow myusername

My latest setup works as posted using ncsa_users, which should only allow a user in the passwd file. Wish I could help more, just going forward blindly on my own as well.
Thanks again. I made all the changes. (FWIW, mine login/authorization was working with the original config based on "myusernameUser", but I changed it anyway.)

I'm still having the exact same problems, however. Just thought I'd report that.
__________________
Hi! I would like to help make your experience on these forums better. If I can help with anything, just ask!

Useful links for newcomers: New members say hello , New users start here, Community subforum, Beginners' wiki page, Maemo5 Intro, Frequently Asked Questions (FAQ)

Choosing open source is an important purchasing decision for your future. The closed source model of computing is a form of exploitation -- of us! Open source empowers us. Be smart -- chose open source.
 
Reply


 
Forum Jump


All times are GMT. The time now is 06:20.